PT-2021-7015

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager Session Management Edition versions affected versions not specified Cisco Unity Connection versions affected versions not...

PT-2021-7241

Name of the Vulnerable Software and Affected Versions Cisco AppDynamics Controller Software affected versions not specified Description A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenticated, remote attacker to access a...

PT-2021-7022

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct SQL injection...

PT-2021-6796

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance versions affected versions not specified Description The issue is related to the Web-Based Reputation Score WBRS engine of Cisco AsyncOS Software, which is affected by insufficient input validation. This could allo...

PT-2021-6873

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA affected versions not specified Description A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to...

PT-2021-7007

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager Session Management Edition versions affected versions not specified Description The issue is related to insufficient checking of...

PT-2021-6883

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site...

Phone Shop Sales Management System: Authorization Issues Vulnerabilities

SourceCodester Phone Shop Sales Managements System is a PHP project from SourceCodester, Inc. that manages phone store sales transactions. An authorization issue vulnerability exists in PHP Phone Shop Sales Managements System, which arises from a lack of valid permission grants and access control...

PT-2021-6882

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine affected versions not specified Description The issue is related to improper enforcement of administrative privilege levels for high-value sensitive data in the web-based management interface of Cisco Identity...

PT-2021-7003

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME affected versions not specified Description A vulnerability in the web-based management interface could allow an...

PT-2021-7234

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive...

Cisco Firepower Management Center Software Multiple Vulnerabilities (cisco-sa-fmc-xss-openredir-TVPMWJyg)

The version of Cisco Firerpower Management Center installed on the remote host is affected by multiple vulnerabilities as referenced in the cisco-sa-fmc-xss-openredir-TVPMWJyg advisory, as follows: - An authenticated, remote attacker can exploit a vulnerability in the web-based management interfa...

Pharmacy Point Of Sale System SQL Injection Vulnerability

Pharmacy Point Of Sale System is a web-based application by Carlo Montero, an individual developer. It is used to help a pharmacy manage its sales transactions. A SQL injection vulnerability exists in Pharmacy Point of Sale System version 1.0, which can be exploited via the useremail parameter in...

Sourcecodester Budget and Expense Tracker System – Code-related vulnerabilities

Sourcecodester Budget And Expense Tracker System is a web-based application by Carlo Montero Personal Developer. It is used to manage your personal/small business budget and expenses. A remote code execution vulnerability exists in Sourcecodester Budget and Expense Tracker System, which can be...

CVE-2021-34763

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an attacker to execute a cross-site scripting XSS attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this...

CVE-2021-34764

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an attacker to execute a cross-site scripting XSS attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this...

Directory traversal

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The attacker would require valid device credentials. The vulnerability is due to...

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an attacker to execute a cross-site scripting XSS attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this...

CVE-2021-34764 Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an attacker to execute a cross-site scripting XSS attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this...

CVE-2021-34764

CVE-2021-34764 affects Cisco Firepower Management Center (FMC) web-based management interface, with multiple vulnerabilities enabling cross-site scripting (XSS) and open redirect attacks. The root cause is improper input validation of HTTP request parameters in the FMC web interface. Cisco’s advi...